Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/3a382a-3dda-4796-b320-3fdfb4140f24/1/v4CafmyhTQoal2Zz4DGeNOlW7T0.mft
File: v4CafmyhTQoal2Zz4DGeNOlW7T0.mft (raw, json)
Hash identifier: oGl2yzn5cqDyqyShEd0yvyghYWoE/+rf+n8gIKCj06M=
Subject key identifier: 32:77:80:6D:67:36:6C:2B:D4:61:4F:39:4E:D4:8A:7D:F6:E1:A3:E2
Authority key identifier: BF:80:9A:7E:6C:A1:4D:0A:1A:97:66:73:E0:31:9E:34:E9:56:ED:3D
Certificate issuer: /CN=bf809a7e6ca14d0a1a976673e0319e34e956ed3d
Certificate serial: 0194BBCDD3013DF769499D660397D6FBDDEA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v4CafmyhTQoal2Zz4DGeNOlW7T0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/3a382a-3dda-4796-b320-3fdfb4140f24/1/v4CafmyhTQoal2Zz4DGeNOlW7T0.mft
Manifest number: 1431
Signing time: Fri 31 Jan 2025 10:00:15 +0000
Manifest this update: Fri 31 Jan 2025 10:00:15 +0000
Manifest next update: Sat 01 Feb 2025 10:00:15 +0000
Files and hashes: 1: R42xE2mJMD9gnW-S_3g2XV8r74E.roa (hash: EXpcy7RAsA9U8XogEzCQScUz5RV6/SXT/hCfZDn3n2Q=)
2: v4CafmyhTQoal2Zz4DGeNOlW7T0.crl (hash: OlEZ/6X4blpJdpDH5FLcR+f6Kp9LK7Q/rqpF7qcMfwg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:d3:01:3d:f7:69:49:9d:66:03:97:d6:fb:dd:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf809a7e6ca14d0a1a976673e0319e34e956ed3d
Validity
Not Before: Jan 31 10:00:15 2025 GMT
Not After : Feb 1 10:00:15 2025 GMT
Subject: CN=3277806d67366c2bd4614f394ed48a7df6e1a3e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:af:5a:80:6f:c6:d6:c9:8c:2a:25:62:50:15:
73:fa:87:4d:99:62:dc:50:4d:ce:0e:ad:e9:12:28:
a1:09:f4:6d:94:ea:67:5e:a7:0f:d4:d9:9a:5b:c5:
97:1f:79:55:4f:23:91:16:7d:c4:7e:4d:31:36:60:
37:0a:fa:f1:78:5c:62:d3:69:42:27:16:26:bc:a3:
db:68:e1:3f:e3:8e:6d:14:1d:84:ee:db:9e:41:ad:
c6:cc:0e:14:8d:ed:ee:c0:f6:0f:66:fc:49:8f:5e:
86:e7:bc:f4:d5:e5:94:de:d2:c9:f5:3f:33:0b:8c:
d9:d0:0f:06:06:9d:3e:f4:a6:66:74:f2:8b:9b:20:
f5:3c:d3:73:73:81:ab:a3:31:7a:fb:d8:30:ef:89:
4f:ec:2b:27:dd:89:c5:f3:3a:68:6e:aa:03:3a:19:
53:d5:af:14:e9:9b:8d:14:74:7e:83:4b:b3:c7:df:
45:06:05:a5:81:64:cf:d7:dd:6d:c6:d0:87:82:3b:
81:21:06:d9:54:75:4a:d1:62:cf:e0:9b:ea:12:f6:
0a:34:2f:c6:fc:4b:d9:d0:e4:2c:1e:48:1a:a4:fa:
d7:af:cc:64:e2:e6:7d:46:a5:49:09:09:1e:ef:f1:
6b:75:28:36:85:1b:6e:25:26:a3:d1:14:15:72:3c:
d7:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:77:80:6D:67:36:6C:2B:D4:61:4F:39:4E:D4:8A:7D:F6:E1:A3:E2
X509v3 Authority Key Identifier:
keyid:BF:80:9A:7E:6C:A1:4D:0A:1A:97:66:73:E0:31:9E:34:E9:56:ED:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v4CafmyhTQoal2Zz4DGeNOlW7T0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/3a382a-3dda-4796-b320-3fdfb4140f24/1/v4CafmyhTQoal2Zz4DGeNOlW7T0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/3a382a-3dda-4796-b320-3fdfb4140f24/1/v4CafmyhTQoal2Zz4DGeNOlW7T0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:89:a9:85:da:3d:c4:bc:65:74:4a:03:0d:f5:4c:8d:56:35:
cf:ca:03:04:85:10:09:c9:74:c3:41:a1:10:f9:d6:1e:e5:c3:
24:25:a0:1f:7e:49:05:30:3d:37:65:5b:0a:84:70:df:5d:35:
ee:37:c8:8f:4f:da:21:69:62:2f:13:7a:4a:84:c5:e8:92:28:
57:43:00:0d:5a:32:c1:cf:e8:0c:d5:7b:43:6b:2a:70:00:81:
ae:16:a0:15:62:69:89:ea:8c:e3:d3:ae:37:e9:6e:d7:90:ef:
5e:3c:56:fb:ca:01:e5:0c:47:57:5e:e1:ef:a2:82:dc:b7:9b:
29:15:8f:de:a3:d6:d3:26:7e:70:91:16:7f:9b:33:7f:23:67:
52:4e:b4:ad:a3:41:72:ab:d5:82:e8:6a:2f:05:14:98:d1:78:
65:1c:20:d5:3e:c1:e9:f4:71:9a:4f:60:f2:5f:08:7e:10:07:
ff:8c:24:7f:54:7f:6f:9a:2f:ce:bb:93:35:d5:0d:71:38:9e:
0c:aa:70:55:8d:7b:b9:9a:41:62:d0:f6:75:29:6e:0b:7e:a5:
98:0a:56:72:f2:a3:07:d2:36:55:38:99:19:14:43:1b:09:74:
d1:47:d9:83:cf:2f:e4:a0:49:25:88:40:b7:d9:28:d3:43:c4:
65:27:63:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:56:56 2025 by rpki-client